last executing test programs: 2.134790571s ago: executing program 2 (id=2318): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000240)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)='\v', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) 1.974393841s ago: executing program 2 (id=2321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0xaf0c, @private2, 0x3}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000002c0)="36d3", 0x2}], 0x1}}], 0x1, 0x40001) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.899334847s ago: executing program 4 (id=2322): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.694121686s ago: executing program 4 (id=2325): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x78, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 1.555739857s ago: executing program 4 (id=2326): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0) 1.430326026s ago: executing program 0 (id=2329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007b00000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.216713772s ago: executing program 0 (id=2331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=@getchain={0x3c, 0x66, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}, [{0x8}, {0x8}, {0x8}]}, 0x3c}}, 0x8840) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2100) 1.047562833s ago: executing program 1 (id=2332): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000240)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)='\v', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r2}, 0x14) 864.566232ms ago: executing program 0 (id=2346): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000660a000000000000180000000000000000000000000000109500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000001000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 861.771274ms ago: executing program 2 (id=2347): sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="34e2de4d8d957a8de4e490b6cd20b988d4edef164bd3377aa381b5f50b7ca40a516489f78cd7208982e9", 0x2a, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="080026009015000008005700"], 0x2c}}, 0x0) 805.299357ms ago: executing program 1 (id=2336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x4, 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 739.1831ms ago: executing program 2 (id=2337): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) select(0x190, 0x0, &(0x7f00000002c0), &(0x7f0000000080), &(0x7f00000000c0)) 738.997113ms ago: executing program 4 (id=2339): shutdown(0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x98, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'macvlan1\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 711.507079ms ago: executing program 3 (id=2340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x3}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 678.179372ms ago: executing program 1 (id=2341): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) 591.533356ms ago: executing program 0 (id=2342): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x7, @none}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x7, @none}, 0xe) 554.793693ms ago: executing program 3 (id=2343): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) r2 = gettid() sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 554.632393ms ago: executing program 4 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xe15438fcc4b8cef1}]}, 0x6c}}, 0x0) 532.783664ms ago: executing program 2 (id=2345): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x48040) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 432.47154ms ago: executing program 3 (id=2348): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 425.652415ms ago: executing program 1 (id=2349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x6c}, 0xa, @in6=@empty, 0x0, 0x0, 0x1, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 393.114853ms ago: executing program 2 (id=2350): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 315.878442ms ago: executing program 0 (id=2351): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300), 0x1}}], 0x1, 0x22, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) 295.019407ms ago: executing program 4 (id=2352): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, 0xdb6}, &(0x7f00000000c0)=0x8) 276.817003ms ago: executing program 3 (id=2353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 275.787671ms ago: executing program 1 (id=2354): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB='$\x00-'], 0x4c}}, 0x0) 161.558266ms ago: executing program 3 (id=2355): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0x3, 0x0, &(0x7f0000000140)) 144.910935ms ago: executing program 0 (id=2356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 134.998072ms ago: executing program 1 (id=2357): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000002000000e4801aed00002000018008000100", @ANYRES32=r1, @ANYBLOB="140002006261746164765f736c6176655f31"], 0x34}}, 0x0) 0s ago: executing program 3 (id=2358): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000}) preadv(r0, &(0x7f00000033c0)=[{&(0x7f0000002200)=""/4096, 0xfdef}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 52.317277][ T5214] cgroup: Unknown subsys name 'net' [ 52.462624][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.798193][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.008313][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.025688][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.034382][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.042842][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.051793][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.059751][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.074177][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.082196][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.089885][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.098340][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.104643][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.106788][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.119591][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.122619][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.134915][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.135608][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.149090][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.159219][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.161407][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.167188][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.175043][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.180729][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.187838][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.196290][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.208995][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.209296][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.224709][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.253388][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.273998][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.292100][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.735908][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 57.831466][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 57.989356][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 58.006337][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.014110][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.021796][ T5226] bridge_slave_0: entered allmulticast mode [ 58.029490][ T5226] bridge_slave_0: entered promiscuous mode [ 58.037659][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 58.090589][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.097868][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.105195][ T5226] bridge_slave_1: entered allmulticast mode [ 58.111931][ T5226] bridge_slave_1: entered promiscuous mode [ 58.142965][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.150573][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.157966][ T5234] bridge_slave_0: entered allmulticast mode [ 58.164868][ T5234] bridge_slave_0: entered promiscuous mode [ 58.207595][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.214969][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.222149][ T5234] bridge_slave_1: entered allmulticast mode [ 58.229455][ T5234] bridge_slave_1: entered promiscuous mode [ 58.242336][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.251851][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 58.299754][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.334360][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.379648][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.416616][ T5226] team0: Port device team_slave_0 added [ 58.461468][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.468818][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.476712][ T5225] bridge_slave_0: entered allmulticast mode [ 58.483460][ T5225] bridge_slave_0: entered promiscuous mode [ 58.493204][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.500495][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.507760][ T5225] bridge_slave_1: entered allmulticast mode [ 58.514572][ T5225] bridge_slave_1: entered promiscuous mode [ 58.522713][ T5226] team0: Port device team_slave_1 added [ 58.544189][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.551584][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.559121][ T5230] bridge_slave_0: entered allmulticast mode [ 58.566615][ T5230] bridge_slave_0: entered promiscuous mode [ 58.591830][ T5234] team0: Port device team_slave_0 added [ 58.648386][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.655998][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.663159][ T5230] bridge_slave_1: entered allmulticast mode [ 58.671223][ T5230] bridge_slave_1: entered promiscuous mode [ 58.692224][ T5234] team0: Port device team_slave_1 added [ 58.711931][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.722032][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.729269][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.755260][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.769184][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.776300][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.802683][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.817149][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.824307][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.831574][ T5231] bridge_slave_0: entered allmulticast mode [ 58.839174][ T5231] bridge_slave_0: entered promiscuous mode [ 58.858366][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.882928][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.902815][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.910148][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.918302][ T5231] bridge_slave_1: entered allmulticast mode [ 58.925409][ T5231] bridge_slave_1: entered promiscuous mode [ 58.933926][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.955289][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.962256][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.988485][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.000497][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.007935][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.033931][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.096354][ T5225] team0: Port device team_slave_0 added [ 59.114477][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.126976][ T5230] team0: Port device team_slave_0 added [ 59.137420][ T5230] team0: Port device team_slave_1 added [ 59.151973][ T5225] team0: Port device team_slave_1 added [ 59.171459][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.230761][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.238268][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.264485][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.285708][ T5232] Bluetooth: hci2: command tx timeout [ 59.285958][ T5229] Bluetooth: hci4: command tx timeout [ 59.291464][ T5232] Bluetooth: hci0: command tx timeout [ 59.311311][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.318903][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.344887][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.357799][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.364916][ T5232] Bluetooth: hci1: command tx timeout [ 59.364933][ T5238] Bluetooth: hci3: command tx timeout [ 59.365763][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.402623][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.419292][ T5226] hsr_slave_0: entered promiscuous mode [ 59.425686][ T5226] hsr_slave_1: entered promiscuous mode [ 59.432960][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.440252][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.466345][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.495949][ T5234] hsr_slave_0: entered promiscuous mode [ 59.502694][ T5234] hsr_slave_1: entered promiscuous mode [ 59.509337][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.517594][ T5234] Cannot create hsr debugfs directory [ 59.561893][ T5231] team0: Port device team_slave_0 added [ 59.571359][ T5231] team0: Port device team_slave_1 added [ 59.602668][ T5230] hsr_slave_0: entered promiscuous mode [ 59.610264][ T5230] hsr_slave_1: entered promiscuous mode [ 59.616996][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.625218][ T5230] Cannot create hsr debugfs directory [ 59.694901][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.701885][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.727953][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.743396][ T5225] hsr_slave_0: entered promiscuous mode [ 59.751091][ T5225] hsr_slave_1: entered promiscuous mode [ 59.759044][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.767342][ T5225] Cannot create hsr debugfs directory [ 59.798739][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.805888][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.832031][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.939822][ T5231] hsr_slave_0: entered promiscuous mode [ 59.946150][ T5231] hsr_slave_1: entered promiscuous mode [ 59.952292][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.960167][ T5231] Cannot create hsr debugfs directory [ 60.320886][ T5226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.334299][ T5226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.351138][ T5226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.361808][ T5226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.426400][ T5225] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.441968][ T5225] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.452037][ T5225] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.479186][ T5225] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.537721][ T5234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.571885][ T5234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.581991][ T5234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.593410][ T5234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.658584][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.668492][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.682559][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.692419][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.803517][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.866156][ T5231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.876993][ T5231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.910682][ T5231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.921855][ T5231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.960585][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.989848][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.029605][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.043732][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.051137][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.124595][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.131753][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.141472][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.148606][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.197826][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.210555][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.217753][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.313463][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.332398][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.340178][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.367380][ T5232] Bluetooth: hci4: command tx timeout [ 61.367419][ T5238] Bluetooth: hci2: command tx timeout [ 61.372804][ T5232] Bluetooth: hci0: command tx timeout [ 61.399899][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.418106][ T5225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.437893][ T5225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.449211][ T5232] Bluetooth: hci1: command tx timeout [ 61.455731][ T5232] Bluetooth: hci3: command tx timeout [ 61.468092][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.481480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.488797][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.579771][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.634861][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.641952][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.673414][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.702123][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.709322][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.769117][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.776324][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.795841][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.803007][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.822414][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.953661][ T5234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.979608][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.093097][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.115902][ T5226] veth0_vlan: entered promiscuous mode [ 62.186368][ T5226] veth1_vlan: entered promiscuous mode [ 62.249402][ T5225] veth0_vlan: entered promiscuous mode [ 62.287760][ T5225] veth1_vlan: entered promiscuous mode [ 62.360021][ T5226] veth0_macvtap: entered promiscuous mode [ 62.391502][ T5226] veth1_macvtap: entered promiscuous mode [ 62.422253][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.466896][ T5225] veth0_macvtap: entered promiscuous mode [ 62.506518][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.520499][ T5225] veth1_macvtap: entered promiscuous mode [ 62.537464][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.584193][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.601247][ T5226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.610804][ T5226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.619671][ T5226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.630712][ T5226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.663568][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.675295][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.688200][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.752962][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.766199][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.777502][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.788353][ T5231] veth0_vlan: entered promiscuous mode [ 62.811391][ T5225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.826462][ T5225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.835287][ T5225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.843976][ T5225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.892537][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.904378][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.908127][ T5231] veth1_vlan: entered promiscuous mode [ 62.978163][ T2542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.986957][ T2542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.013480][ T5230] veth0_vlan: entered promiscuous mode [ 63.024420][ T5234] veth0_vlan: entered promiscuous mode [ 63.043111][ T5234] veth1_vlan: entered promiscuous mode [ 63.100067][ T5230] veth1_vlan: entered promiscuous mode [ 63.112534][ T5231] veth0_macvtap: entered promiscuous mode [ 63.184497][ T5234] veth0_macvtap: entered promiscuous mode [ 63.194376][ T5231] veth1_macvtap: entered promiscuous mode [ 63.218860][ T5234] veth1_macvtap: entered promiscuous mode [ 63.228556][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.249331][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.321231][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.332818][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.348029][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.358563][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.371051][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.386568][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.406690][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.408550][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.419188][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.437470][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.452123][ T5238] Bluetooth: hci0: command tx timeout [ 63.452304][ T5232] Bluetooth: hci2: command tx timeout [ 63.459028][ T5229] Bluetooth: hci4: command tx timeout [ 63.485961][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.497942][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.507259][ T5230] veth0_macvtap: entered promiscuous mode [ 63.516550][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.527413][ T5229] Bluetooth: hci3: command tx timeout [ 63.527456][ T5229] Bluetooth: hci1: command tx timeout [ 63.541607][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.555544][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.567478][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.577872][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.589636][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.601836][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.638392][ T5230] veth1_macvtap: entered promiscuous mode [ 63.678722][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.705323][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.721744][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.732826][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.749101][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.764514][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.779144][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.794327][ T5231] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.806801][ T5231] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.824650][ T5231] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.833406][ T5231] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.905658][ T5234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.914422][ T5234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.971566][ T5234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.983705][ T5234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.064170][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.075605][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.087549][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.098467][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.108908][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.121608][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.141073][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.152285][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.167171][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.179590][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.190138][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.202344][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.230209][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.249298][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.273893][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.284678][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.309349][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.329013][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.382773][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.395306][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.404049][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.444957][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.765562][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.787703][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.854214][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.888443][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.950322][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.977919][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.034979][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.061538][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.116826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.135626][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.143143][ T5354] warning: `syz.1.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.276469][ T5356] veth2: entered allmulticast mode [ 65.373702][ T2542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.392813][ T2542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.525343][ T5229] Bluetooth: hci2: command tx timeout [ 65.530808][ T5229] Bluetooth: hci4: command tx timeout [ 65.536916][ T5238] Bluetooth: hci0: command tx timeout [ 65.600804][ T5369] netlink: 104 bytes leftover after parsing attributes in process `syz.2.26'. [ 65.615657][ T5238] Bluetooth: hci3: command tx timeout [ 65.621133][ T5229] Bluetooth: hci1: command tx timeout [ 66.064773][ T5388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 67.146236][ T5427] macvlan0: entered promiscuous mode [ 67.159943][ T5427] macvlan0: left promiscuous mode [ 67.590993][ T5438] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET) [ 67.692656][ T5447] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.841153][ T5453] batadv_slave_1: entered promiscuous mode [ 67.859347][ T5449] batadv_slave_1: left promiscuous mode [ 68.192182][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 69.154853][ T5507] IPVS: Scheduler module ip_vs_sip not found [ 69.764224][ T5539] netlink: 'syz.3.97': attribute type 11 has an invalid length. [ 69.787235][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 70.025713][ T5551] netlink: 'syz.3.105': attribute type 2 has an invalid length. [ 70.050089][ T5551] netlink: 'syz.3.105': attribute type 6 has an invalid length. [ 70.074225][ T5551] netlink: 'syz.3.105': attribute type 7 has an invalid length. [ 70.084983][ T5551] netlink: 'syz.3.105': attribute type 7 has an invalid length. [ 70.103269][ T5551] netlink: 13042 bytes leftover after parsing attributes in process `syz.3.105'. [ 70.143834][ T5551] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.105'. [ 70.173805][ T5558] Bluetooth: MGMT ver 1.23 [ 70.182962][ T5558] Bluetooth: hci3: unsupported parameter 64512 [ 70.182975][ T5551] netlink: 'syz.3.105': attribute type 2 has an invalid length. [ 70.194310][ T5558] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 70.214858][ T5551] netlink: 'syz.3.105': attribute type 6 has an invalid length. [ 70.236382][ T5551] netlink: 'syz.3.105': attribute type 7 has an invalid length. [ 70.244267][ T5551] netlink: 'syz.3.105': attribute type 7 has an invalid length. [ 70.252911][ T5551] netlink: 13042 bytes leftover after parsing attributes in process `syz.3.105'. [ 70.630379][ T5578] netlink: 'syz.0.117': attribute type 4 has an invalid length. [ 70.864884][ T5589] Bluetooth: MGMT ver 1.23 [ 70.982484][ T5593] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.124'. [ 71.321698][ T5610] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.360038][ T5612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 71.398090][ T5612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 71.613208][ T5623] batadv_slave_1: entered promiscuous mode [ 71.639124][ T5622] batadv_slave_1: left promiscuous mode [ 71.662380][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 71.776641][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.783333][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.555142][ T5667] batman_adv: batadv0: Adding interface: gretap1 [ 72.579937][ T5667] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.648826][ T5667] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 73.455253][ T5706] sctp: [Deprecated]: syz.3.178 (pid 5706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.455253][ T5706] Use struct sctp_sack_info instead [ 73.618931][ T5715] syz.3.181[5715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.619180][ T5715] syz.3.181[5715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.166404][ T5734] dccp_v6_rcv: dropped packet with invalid checksum [ 74.731267][ T5765] netlink: 'syz.4.205': attribute type 4 has an invalid length. [ 75.455214][ T5798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.223'. [ 75.464147][ T5798] netlink: 'syz.1.223': attribute type 7 has an invalid length. [ 75.499249][ T5798] netlink: 'syz.1.223': attribute type 8 has an invalid length. [ 75.523628][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 76.164700][ T5238] Bluetooth: hci3: command 0x1407 tx timeout [ 76.174789][ T5229] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 76.609103][ T5846] sctp: [Deprecated]: syz.3.241 (pid 5846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.609103][ T5846] Use struct sctp_sack_info instead [ 76.916663][ T1168] cfg80211: failed to load regulatory.db [ 77.360079][ T5876] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 77.555077][ T5880] netlink: 'syz.1.256': attribute type 11 has an invalid length. [ 77.699867][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 77.947207][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'. [ 77.986597][ T5897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.265'. [ 78.039665][ T5905] netlink: 'syz.0.267': attribute type 4 has an invalid length. [ 78.066204][ T5905] netlink: 'syz.0.267': attribute type 4 has an invalid length. [ 78.092715][ T5905] netlink: 126032 bytes leftover after parsing attributes in process `syz.0.267'. [ 78.436076][ T5918] netlink: 428 bytes leftover after parsing attributes in process `syz.1.274'. [ 78.482883][ T5918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.274'. [ 79.148266][ T5943] Bluetooth: hci3: unsupported parameter 65535 [ 79.154495][ T5943] Bluetooth: hci3: invalid length 1, exp 2 for type 16 [ 79.276695][ T5948] Zero length message leads to an empty skb [ 80.672672][ T6006] pimreg: entered allmulticast mode [ 80.744107][ T6006] pimreg: left allmulticast mode [ 81.322256][ T6031] netlink: 104 bytes leftover after parsing attributes in process `syz.4.326'. [ 82.189049][ T6074] netlink: 32 bytes leftover after parsing attributes in process `syz.1.346'. [ 83.167367][ T6121] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 83.617435][ T6141] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 86.357626][ T6257] netlink: 232 bytes leftover after parsing attributes in process `syz.2.430'. [ 86.403181][ T6257] netlink: 72 bytes leftover after parsing attributes in process `syz.2.430'. [ 86.441652][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 86.479238][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.432'. [ 86.536900][ T6259] gtp0: entered promiscuous mode [ 86.542482][ T6259] gtp0: entered allmulticast mode [ 87.175969][ T6296] netlink: 'syz.1.445': attribute type 2 has an invalid length. [ 87.991270][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 88.951654][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 89.420344][ T6385] dummy0: entered promiscuous mode [ 89.435334][ T6385] macsec1: entered allmulticast mode [ 89.450918][ T6385] dummy0: entered allmulticast mode [ 89.493805][ T6385] dummy0: left allmulticast mode [ 89.509413][ T6385] dummy0: left promiscuous mode [ 90.127937][ T6406] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.525220][ T6431] syz.4.505[6431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.525469][ T6431] syz.4.505[6431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.045528][ T6451] hsr0: entered promiscuous mode [ 91.468408][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.520'. [ 91.870053][ T6475] netlink: 208132 bytes leftover after parsing attributes in process `syz.4.522'. [ 91.911655][ T6475] netlink: del zone limit has 4 unknown bytes [ 92.490513][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 92.678032][ T6511] sctp: [Deprecated]: syz.3.540 (pid 6511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.678032][ T6511] Use struct sctp_sack_info instead [ 92.992561][ T6524] netlink: 'syz.3.544': attribute type 2 has an invalid length. [ 94.153424][ T6582] netlink: 'syz.2.568': attribute type 4 has an invalid length. [ 94.274317][ T6576] syzkaller1: entered promiscuous mode [ 94.292570][ T6576] syzkaller1: entered allmulticast mode [ 94.324950][ T5229] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 94.325233][ T5238] Bluetooth: hci0: command 0x0401 tx timeout [ 94.566207][ T6591] syzkaller1: entered promiscuous mode [ 94.578926][ T6591] syzkaller1: entered allmulticast mode [ 94.609098][ T6593] bridge0: entered promiscuous mode [ 94.610555][ T6598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.575'. [ 94.622383][ T6593] macvlan2: entered promiscuous mode [ 94.655920][ T6593] bridge0: left promiscuous mode [ 94.984168][ T6612] openvswitch: netlink: Unknown key attributes 2 [ 95.177343][ T6616] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 95.385743][ T6625] netlink: 'syz.0.587': attribute type 21 has an invalid length. [ 95.399700][ T6625] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.587'. [ 95.769100][ T6649] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.596'. [ 95.868415][ T6651] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 95.911007][ T6651] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 95.939846][ T6651] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.598'. [ 95.953937][ T6651] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 97.449500][ T6705] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 97.459428][ T6705] netlink: 9320 bytes leftover after parsing attributes in process `syz.0.621'. [ 97.477597][ T6705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.621'. [ 97.509216][ T6705] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 97.546026][ T6705] netlink: 'syz.0.621': attribute type 2 has an invalid length. [ 97.900457][ T6714] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 97.938782][ T6714] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.625'. [ 98.045899][ T6717] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.626'. [ 98.601016][ T6735] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.634'. [ 98.622152][ T6735] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.866931][ T6744] netlink: 184 bytes leftover after parsing attributes in process `syz.1.638'. [ 98.988464][ T6749] bridge0: port 3(gretap0) entered blocking state [ 99.029363][ T6749] bridge0: port 3(gretap0) entered disabled state [ 99.051836][ T6749] gretap0: entered allmulticast mode [ 99.073571][ T6749] gretap0: entered promiscuous mode [ 99.116400][ T6749] bridge0: port 3(gretap0) entered blocking state [ 99.123430][ T6749] bridge0: port 3(gretap0) entered forwarding state [ 99.143321][ T6752] gretap0: left allmulticast mode [ 99.149217][ T6752] gretap0: left promiscuous mode [ 99.156747][ T6752] bridge0: port 3(gretap0) entered disabled state [ 99.562606][ T6768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.649'. [ 100.735428][ T6809] syzkaller1: entered promiscuous mode [ 100.753908][ T6809] syzkaller1: entered allmulticast mode [ 100.868833][ T6812] validate_nla: 2 callbacks suppressed [ 100.868852][ T6812] netlink: 'syz.4.668': attribute type 3 has an invalid length. [ 101.246940][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 102.778812][ T11] tipc: Subscription rejected, illegal request [ 103.175401][ T6887] Bluetooth: hci3: invalid length 0, exp 2 for type 5 [ 103.616279][ T6897] team0: Device ipvlan2 is already an upper device of the team interface [ 104.248069][ T6921] tun0: tun_chr_ioctl cmd 1074025675 [ 104.284950][ T6921] tun0: persist enabled [ 104.315466][ T6921] tun0: tun_chr_ioctl cmd 1074025675 [ 104.320819][ T6921] tun0: persist disabled [ 104.404432][ T6927] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 104.426703][ T6927] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 104.788961][ T6938] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 104.798142][ T6938] macvlan2: entered allmulticast mode [ 104.803801][ T6938] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 104.834169][ T6938] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 104.844211][ T6938] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 105.529367][ T6963] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.736'. [ 105.555633][ T6963] openvswitch: netlink: IP tunnel dst address not specified [ 105.621357][ T6968] Bluetooth: hci3: unsupported parameter 64512 [ 105.631144][ T6968] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 106.593972][ T6995] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 106.628750][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.638112][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.744369][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.751631][ T6995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.760021][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.768047][ T6995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.820977][ T6995] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.615605][ T7063] Bluetooth: hci3: unsupported parameter 64512 [ 108.634812][ T7063] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 109.448541][ T7102] netlink: 'syz.0.804': attribute type 29 has an invalid length. [ 109.475172][ T7108] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 109.496286][ T7102] netlink: 'syz.0.804': attribute type 29 has an invalid length. [ 109.565089][ T7102] netlink: 500 bytes leftover after parsing attributes in process `syz.0.804'. [ 110.060474][ T7135] netlink: 48 bytes leftover after parsing attributes in process `syz.3.818'. [ 111.295044][ T7181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'. [ 111.405612][ T7189] sctp: [Deprecated]: syz.1.841 (pid 7189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.405612][ T7189] Use struct sctp_sack_info instead [ 111.626051][ T7195] netlink: 'syz.2.844': attribute type 4 has an invalid length. [ 111.650897][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 111.983109][ T7214] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 112.767049][ T7246] netlink: 'syz.3.865': attribute type 9 has an invalid length. [ 113.131397][ T7261] netlink: 176 bytes leftover after parsing attributes in process `syz.0.872'. [ 113.656383][ T7280] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.757124][ T7285] dccp_invalid_packet: P.Data Offset(0) too small [ 113.903331][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 113.993023][ T7293] bond0: option arp_interval: invalid value (18446744072376677605) [ 114.027275][ T7293] bond0: option arp_interval: allowed values 0 - 2147483647 [ 114.489914][ T7312] batadv_slave_1: entered promiscuous mode [ 114.519301][ T7311] batadv_slave_1: left promiscuous mode [ 114.990121][ T7331] netlink: 176 bytes leftover after parsing attributes in process `syz.2.903'. [ 115.426019][ T7353] netlink: 'syz.2.924': attribute type 11 has an invalid length. [ 115.455969][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 115.883984][ T7372] netlink: 176 bytes leftover after parsing attributes in process `syz.4.921'. [ 115.908329][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 116.462192][ T7391] netlink: 'syz.0.928': attribute type 11 has an invalid length. [ 116.476787][ T7393] Bluetooth: hci3: unsupported parameter 64512 [ 116.494943][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'. [ 116.504151][ T7393] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 116.773862][ T7401] netlink: 'syz.4.937': attribute type 2 has an invalid length. [ 116.804236][ T7401] netlink: 'syz.4.937': attribute type 6 has an invalid length. [ 116.831686][ T7401] netlink: 'syz.4.937': attribute type 7 has an invalid length. [ 116.852810][ T7401] netlink: 'syz.4.937': attribute type 7 has an invalid length. [ 116.861595][ T7401] netlink: 13042 bytes leftover after parsing attributes in process `syz.4.937'. [ 116.884991][ T7401] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.937'. [ 116.924357][ T7401] netlink: 'syz.4.937': attribute type 2 has an invalid length. [ 116.941190][ T7401] netlink: 'syz.4.937': attribute type 6 has an invalid length. [ 116.955661][ T7401] netlink: 'syz.4.937': attribute type 7 has an invalid length. [ 116.963391][ T7401] netlink: 'syz.4.937': attribute type 7 has an invalid length. [ 117.015059][ T7401] netlink: 13042 bytes leftover after parsing attributes in process `syz.4.937'. [ 117.118496][ T7413] batadv_slave_1: entered promiscuous mode [ 117.172221][ T7412] batadv_slave_1: left promiscuous mode [ 117.512226][ T7426] Bluetooth: hci3: unsupported parameter 64512 [ 117.541272][ T7426] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 117.595604][ T7430] netlink: 'syz.4.946': attribute type 11 has an invalid length. [ 117.603394][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 117.895600][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 118.768800][ T7473] batman_adv: batadv0: Adding interface: gretap1 [ 118.795116][ T7473] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.820959][ T7473] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 119.111818][ T7493] sctp: [Deprecated]: syz.1.980 (pid 7493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.111818][ T7493] Use struct sctp_sack_info instead [ 119.402096][ T7504] syz.1.984[7504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.402351][ T7504] syz.1.984[7504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.135567][ T7534] netlink: 'syz.2.1009': attribute type 4 has an invalid length. [ 120.333854][ T7540] dccp_v6_rcv: dropped packet with invalid checksum [ 121.341863][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1026'. [ 121.384685][ T7593] netlink: 'syz.2.1026': attribute type 7 has an invalid length. [ 121.411101][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 122.084943][ T5238] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 122.085080][ T5229] Bluetooth: hci3: command 0x1407 tx timeout [ 122.151322][ T7630] sctp: [Deprecated]: syz.4.1045 (pid 7630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.151322][ T7630] Use struct sctp_sack_info instead [ 122.395678][ T7639] netlink: 'syz.3.1059': attribute type 11 has an invalid length. [ 122.926321][ T7657] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 123.186971][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1062'. [ 123.418307][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1067'. [ 123.428148][ T7679] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1067'. [ 123.504770][ T7684] validate_nla: 1 callbacks suppressed [ 123.504791][ T7684] netlink: 'syz.3.1068': attribute type 4 has an invalid length. [ 123.558858][ T7684] netlink: 'syz.3.1068': attribute type 4 has an invalid length. [ 123.598561][ T7684] netlink: 126032 bytes leftover after parsing attributes in process `syz.3.1068'. [ 123.723835][ T7690] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1072'. [ 123.768025][ T7690] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1072'. [ 124.193694][ T7708] Bluetooth: hci3: unsupported parameter 65535 [ 124.224773][ T7708] Bluetooth: hci3: invalid length 1, exp 2 for type 16 [ 126.003793][ T7782] pimreg: entered allmulticast mode [ 126.155033][ T7791] pimreg: left allmulticast mode [ 126.288182][ T7797] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1122'. [ 127.012798][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 127.032476][ T7830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1135'. [ 127.088158][ T7830] gtp0: entered promiscuous mode [ 127.100588][ T7830] gtp0: entered allmulticast mode [ 130.218043][ T7951] dummy0: entered promiscuous mode [ 130.240970][ T7951] macsec2: entered allmulticast mode [ 130.259865][ T7951] dummy0: entered allmulticast mode [ 130.295926][ T7951] dummy0: left allmulticast mode [ 130.301129][ T7951] dummy0: left promiscuous mode [ 130.448909][ T7961] hsr0: entered promiscuous mode [ 130.739588][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 130.993349][ T7981] openvswitch: netlink: Unknown key attributes 2 [ 131.195953][ T7991] netlink: 'syz.0.1209': attribute type 4 has an invalid length. [ 131.704465][ T7999] syzkaller1: entered promiscuous mode [ 131.724628][ T7999] syzkaller1: entered allmulticast mode [ 131.860952][ T8012] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.1219'. [ 132.265768][ T8028] bridge0: port 3(gretap0) entered blocking state [ 132.295072][ T8028] bridge0: port 3(gretap0) entered disabled state [ 132.305555][ T8028] gretap0: entered allmulticast mode [ 132.321789][ T8028] gretap0: entered promiscuous mode [ 132.352905][ T8028] bridge0: port 3(gretap0) entered blocking state [ 132.359550][ T8028] bridge0: port 3(gretap0) entered forwarding state [ 132.375636][ T8035] gretap0: left allmulticast mode [ 132.420413][ T8035] gretap0: left promiscuous mode [ 132.434626][ T8035] bridge0: port 3(gretap0) entered disabled state [ 132.732023][ T8052] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 132.756531][ T8052] netlink: 'syz.1.1235': attribute type 6 has an invalid length. [ 132.779459][ T8052] netlink: 'syz.1.1235': attribute type 7 has an invalid length. [ 132.811210][ T8052] netlink: 'syz.1.1235': attribute type 7 has an invalid length. [ 132.819494][ T8052] netlink: 13042 bytes leftover after parsing attributes in process `syz.1.1235'. [ 132.833416][ T8052] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1235'. [ 132.878821][ T8052] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 132.896778][ T8052] netlink: 'syz.1.1235': attribute type 6 has an invalid length. [ 132.916101][ T8052] netlink: 'syz.1.1235': attribute type 7 has an invalid length. [ 132.933062][ T8052] netlink: 'syz.1.1235': attribute type 7 has an invalid length. [ 132.944680][ T8052] netlink: 13042 bytes leftover after parsing attributes in process `syz.1.1235'. [ 133.208416][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.215156][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.510447][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1252'. [ 133.820229][ T8098] netlink: 'syz.2.1260': attribute type 2 has an invalid length. [ 133.838618][ T8098] netlink: 13042 bytes leftover after parsing attributes in process `syz.2.1260'. [ 133.881982][ T8098] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1260'. [ 133.902677][ T8098] netlink: 13042 bytes leftover after parsing attributes in process `syz.2.1260'. [ 134.057119][ T8105] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1272'. [ 135.022066][ T8151] Bluetooth: hci3: unsupported parameter 64512 [ 135.045014][ T8151] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 136.052204][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.060025][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.137983][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.145274][ T8202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.152817][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.160057][ T8202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.200851][ T8202] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.716246][ T8229] __nla_validate_parse: 5 callbacks suppressed [ 136.716265][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'. [ 136.775148][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'. [ 137.403074][ T8251] batadv_slave_1: entered promiscuous mode [ 137.431488][ T8247] batadv_slave_1: left promiscuous mode [ 137.778972][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'. [ 138.497956][ T8295] validate_nla: 20 callbacks suppressed [ 138.497975][ T8295] netlink: 'syz.2.1348': attribute type 29 has an invalid length. [ 138.586670][ T8295] netlink: 'syz.2.1348': attribute type 29 has an invalid length. [ 138.617213][ T8302] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1348'. [ 139.112729][ T8313] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1359'. [ 140.706455][ T8372] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 140.918065][ T8382] macvlan0: entered promiscuous mode [ 140.931374][ T8382] macvlan0: left promiscuous mode [ 141.246010][ T8393] netlink: 'syz.0.1405': attribute type 9 has an invalid length. [ 141.376348][ T8401] macvlan0: entered promiscuous mode [ 141.418683][ T8401] macvlan0: left promiscuous mode [ 142.226197][ T8436] macvlan0: entered promiscuous mode [ 142.307352][ T8436] macvlan0: left promiscuous mode [ 144.192755][ T8522] dccp_v6_rcv: dropped packet with invalid checksum [ 144.671402][ T8543] netlink: 'syz.0.1476': attribute type 4 has an invalid length. [ 144.820365][ T8549] sctp: [Deprecated]: syz.4.1468 (pid 8549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.820365][ T8549] Use struct sctp_sack_info instead [ 144.876736][ T8555] syz.2.1469[8555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.876972][ T8555] syz.2.1469[8555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.795600][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1488'. [ 145.825307][ T8594] netlink: 'syz.4.1488': attribute type 7 has an invalid length. [ 145.852142][ T8594] netlink: 'syz.4.1488': attribute type 8 has an invalid length. [ 145.862396][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1488'. [ 146.085037][ T5238] Bluetooth: hci3: command 0x1407 tx timeout [ 146.091216][ T5229] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 146.370246][ T8619] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 146.501734][ T8627] netlink: 'syz.4.1502': attribute type 11 has an invalid length. [ 146.593314][ T8630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1506'. [ 146.628447][ T8630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1506'. [ 146.756171][ T8637] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1508'. [ 146.826226][ T8637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1508'. [ 148.164843][ T5238] Bluetooth: hci3: command 0x1407 tx timeout [ 148.169658][ T5229] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 148.235992][ T8699] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1536'. [ 148.917971][ T8731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1553'. [ 149.745493][ T8767] netlink: 'syz.0.1579': attribute type 1 has an invalid length. [ 149.817052][ T8768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1570'. [ 156.604523][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 157.286281][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 159.005781][ T9062] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.085135][ T9067] syz.2.1711[9067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.085368][ T9067] syz.2.1711[9067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.269983][ T9076] dummy0: entered promiscuous mode [ 159.303598][ T9076] macsec2: entered allmulticast mode [ 159.321888][ T9076] dummy0: entered allmulticast mode [ 159.339099][ T9076] dummy0: left allmulticast mode [ 159.349953][ T9076] dummy0: left promiscuous mode [ 159.924488][ T9096] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 160.027173][ T9104] syz.1.1714[9104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.027427][ T9104] syz.1.1714[9104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.586228][ T9126] hsr0: entered promiscuous mode [ 161.570575][ T9161] sctp: [Deprecated]: syz.1.1741 (pid 9161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.570575][ T9161] Use struct sctp_sack_info instead [ 161.800347][ T9170] sctp: [Deprecated]: syz.0.1755 (pid 9170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.800347][ T9170] Use struct sctp_sack_info instead [ 161.885158][ T9171] netlink: 208132 bytes leftover after parsing attributes in process `syz.2.1743'. [ 161.925483][ T5238] Bluetooth: hci0: command 0x0401 tx timeout [ 161.929528][ T9171] netlink: del zone limit has 4 unknown bytes [ 161.937881][ T5229] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 163.133635][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1767'. [ 163.899576][ T9250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1781'. [ 163.985531][ T9253] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 164.005556][ T5238] Bluetooth: hci0: command 0x0401 tx timeout [ 164.012635][ T5229] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 164.127613][ T9255] syzkaller1: entered promiscuous mode [ 164.139280][ T9255] syzkaller1: entered allmulticast mode [ 164.727046][ T9273] syzkaller1: entered promiscuous mode [ 164.732748][ T9273] syzkaller1: entered allmulticast mode [ 165.071682][ T9295] netlink: 'syz.2.1801': attribute type 1 has an invalid length. [ 165.100971][ T9295] netlink: 'syz.2.1801': attribute type 1 has an invalid length. [ 165.129236][ T9295] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.1801'. [ 165.161344][ T9295] netlink: 'syz.2.1801': attribute type 1 has an invalid length. [ 165.361314][ T9307] syzkaller1: entered promiscuous mode [ 165.402168][ T9307] syzkaller1: entered allmulticast mode [ 166.085707][ T5229] Bluetooth: hci0: command 0x0401 tx timeout [ 166.480890][ T9337] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 166.524768][ T9337] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 166.563750][ T9337] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.1818'. [ 166.575269][ T9339] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.1828'. [ 166.614938][ T9337] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 166.957231][ T9351] syzkaller1: entered promiscuous mode [ 166.973177][ T9351] syzkaller1: entered allmulticast mode [ 166.993856][ T9353] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.1822'. [ 167.422018][ T9366] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 167.430037][ T9366] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1827'. [ 167.445142][ T9366] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 167.471267][ T9366] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 167.652381][ T9372] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 167.676549][ T9376] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1832'. [ 168.289945][ T9396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1843'. [ 168.578119][ T9411] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.1849'. [ 168.598611][ T9411] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.642200][ T9410] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1848'. [ 169.345337][ T9443] bridge0: port 3(gretap0) entered blocking state [ 169.381523][ T9443] bridge0: port 3(gretap0) entered disabled state [ 169.402973][ T9443] gretap0: entered allmulticast mode [ 169.436196][ T9443] gretap0: entered promiscuous mode [ 169.442150][ T9443] bridge0: port 3(gretap0) entered blocking state [ 169.448800][ T9443] bridge0: port 3(gretap0) entered forwarding state [ 169.490417][ T9448] gretap0: left allmulticast mode [ 169.505892][ T9448] gretap0: left promiscuous mode [ 169.517879][ T9448] bridge0: port 3(gretap0) entered disabled state [ 169.646502][ T9451] syzkaller1: entered promiscuous mode [ 169.652129][ T9451] syzkaller1: entered allmulticast mode [ 169.865377][ T9461] netlink: 'syz.3.1870': attribute type 3 has an invalid length. [ 169.912592][ T9462] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1868'. [ 170.353741][ T9480] bridge0: port 3(gretap0) entered blocking state [ 170.377980][ T9480] bridge0: port 3(gretap0) entered disabled state [ 170.393708][ T9480] gretap0: entered allmulticast mode [ 170.410470][ T9480] gretap0: entered promiscuous mode [ 170.425254][ T9480] bridge0: port 3(gretap0) entered blocking state [ 170.431857][ T9480] bridge0: port 3(gretap0) entered forwarding state [ 170.468434][ T9489] gretap0: left allmulticast mode [ 170.524049][ T9489] gretap0: left promiscuous mode [ 170.535150][ T9489] bridge0: port 3(gretap0) entered disabled state [ 170.570778][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1885'. [ 170.599309][ T9490] syzkaller1: entered promiscuous mode [ 170.605580][ T9490] syzkaller1: entered allmulticast mode [ 170.698409][ T9498] netlink: 'syz.1.1887': attribute type 3 has an invalid length. [ 171.402597][ T9530] netlink: 'syz.0.1902': attribute type 3 has an invalid length. [ 171.622769][ T12] tipc: Subscription rejected, illegal request [ 172.028765][ T9521] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.599951][ T9582] team0: Device ipvlan2 is already an upper device of the team interface [ 172.751431][ T9583] syzkaller1: entered promiscuous mode [ 172.769346][ T9583] syzkaller1: entered allmulticast mode [ 173.366630][ T9608] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 173.373883][ T9608] macvlan2: entered allmulticast mode [ 173.433602][ T9608] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 173.454635][ T9608] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 173.461782][ T9608] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 174.427306][ T9610] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.960785][ T9650] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 174.994915][ T9650] macvlan2: entered allmulticast mode [ 175.010618][ T9650] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 175.061833][ T9650] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 175.083873][ T9650] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 177.199053][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 177.255948][ T9697] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1971'. [ 177.259785][ T9694] Bluetooth: hci3: unsupported parameter 64512 [ 177.322885][ T9694] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 178.024240][ T9718] sctp: [Deprecated]: syz.4.1985 (pid 9718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.024240][ T9718] Use struct sctp_sack_info instead [ 178.074733][ T9718] sctp: [Deprecated]: syz.4.1985 (pid 9718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.074733][ T9718] Use struct sctp_sack_info instead [ 178.306244][ T9723] netlink: 'syz.0.1986': attribute type 2 has an invalid length. [ 178.329889][ T9723] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1986'. [ 178.549029][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1991'. [ 179.825990][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 179.854718][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 180.371246][ T9793] netlink: 'syz.4.2020': attribute type 5 has an invalid length. [ 180.687356][ T9805] trusted_key: syz.3.2026 sent an empty control message without MSG_MORE. [ 181.234663][ T9827] Bluetooth: hci3: unsupported parameter 64512 [ 181.250167][ T9827] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 181.369905][ T5244] Bluetooth: hci0: command 0x0401 tx timeout [ 181.376241][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 181.376280][ T4621] Bluetooth: hci3: command 0x1407 tx timeout [ 181.388461][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 182.199190][ T9865] xt_NFQUEUE: number of total queues is 0 [ 182.703669][ T9885] netlink: 'syz.2.2062': attribute type 1 has an invalid length. [ 183.527946][ T9917] Bluetooth: hci3: unsupported parameter 64512 [ 183.534246][ T9917] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 183.611703][ T9919] netlink: 'syz.4.2079': attribute type 4 has an invalid length. [ 183.728224][ T9923] macvlan2: entered promiscuous mode [ 183.733580][ T9923] vlan0: entered promiscuous mode [ 183.770824][ T9923] vlan0: left promiscuous mode [ 184.653345][ T9967] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2102'. [ 185.211573][ T9990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2113'. [ 185.965890][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2127'. [ 186.003375][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2127'. [ 186.684888][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 187.283630][T10064] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2146'. [ 187.312794][T10064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2146'. [ 188.505673][T10115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2171'. [ 188.536206][T10117] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2172'. [ 188.574703][T10117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2172'. [ 189.178431][T10151] netlink: 'syz.0.2187': attribute type 1 has an invalid length. [ 189.474757][T10159] netlink: 'syz.4.2192': attribute type 5 has an invalid length. [ 190.332625][T10187] xt_NFQUEUE: number of total queues is 0 [ 192.099756][T10254] __nla_validate_parse: 1 callbacks suppressed [ 192.099777][T10254] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.2232'. [ 192.127748][T10254] openvswitch: netlink: IP tunnel dst address not specified [ 192.306702][T10266] netlink: 135 bytes leftover after parsing attributes in process `syz.0.2238'. [ 192.471854][T10272] sock: sock_set_timeout: `syz.1.2241' (pid 10272) tries to set negative timeout [ 193.137437][T10302] netlink: 'syz.2.2252': attribute type 5 has an invalid length. [ 193.662334][T10320] Bluetooth: hci3: unsupported parameter 64512 [ 193.695137][T10320] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 193.936350][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'. [ 193.974867][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 194.657366][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663738][ T1259] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.889303][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 194.915365][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2286'. [ 195.869658][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 195.893346][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 196.093010][T10429] Bluetooth: hci3: unsupported parameter 64512 [ 196.099584][T10429] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 196.284045][T10437] netlink: 'syz.1.2316': attribute type 4 has an invalid length. [ 196.313098][T10440] macvlan2: entered promiscuous mode [ 196.324657][T10440] vlan0: entered promiscuous mode [ 196.337000][T10440] vlan0: left promiscuous mode [ 196.542890][T10450] netlink: 'syz.4.2322': attribute type 2 has an invalid length. [ 196.575327][T10450] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2322'. [ 196.626528][T10454] sctp: [Deprecated]: syz.1.2335 (pid 10454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.626528][T10454] Use struct sctp_sack_info instead [ 196.674694][T10454] sctp: [Deprecated]: syz.1.2335 (pid 10454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.674694][T10454] Use struct sctp_sack_info instead [ 198.152750][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2354'. [ 198.162414][T10515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2354'. [ 198.311758][T10523] [ 198.314132][T10523] ================================================ [ 198.320638][T10523] WARNING: lock held when returning to user space! [ 198.327148][T10523] 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 Not tainted [ 198.334265][T10523] ------------------------------------------------ [ 198.340763][T10523] syz.1.2357/10523 is leaving the kernel with locks still held! [ 198.348399][T10523] 1 lock held by syz.1.2357/10523: [ 198.353519][T10523] #0: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_act_cable_test+0x187/0x3f0